I've been charged $321.80 every month for the past seven months, although I only used Amazon Web Services briefly for a class some time ago. I haven't knowingly used any AWS services since then, and my account currently shows no active resources or billing activity that explains the payments. I understand AWS may be able to trace the charges using the transaction number from my credit card statement, but getting support has been difficult. How can I determine whether these are legitimate charges from an old account or fraudulent transactions, and what's the best way to have AWS investigate?
2 Answers
If this is the account you used for class, check its billing console and monthly invoices carefully. A resource may have been left running or exceeded the free tier, and some charges can come from services in a different region. Also check whether another login or payment method is associated with the account.
Contact AWS through its official support or billing channel and provide the exact transaction numbers, charge dates, amounts, and the last four digits of the card. Ask them to search for the account or billing profile connected to those transactions. If they can’t match the charges to you, dispute them with your card issuer and report the card as potentially compromised.

I’m considering canceling the card, although I haven’t noticed any other suspicious transactions. I’ll gather the statement details and contact both AWS billing support and the bank.